mirror of
https://github.com/Yamato-Security/WELA.git
synced 2026-10-23 22:53:00 +02:00
Verify actual current-token access to built-in event channels (#432)
* Add actual current-token native channel read evidence * Use supported workflow shells and link channel-read changelogs * Handle real event exceptions and bind loaded token helper to source * Capture query-token interval after evidence and metadata preparation * Retain native child process exit evidence across PowerShell engines * Bound native reader fixture pipe draining and child termination * Preserve native errors from attributed channel query statuses
This commit is contained in:
1 parent
c6da22a2ad
commit
fd7a7924aa
13 files changed
+456
-2
No files matched your search
@@ -39,6 +39,10 @@ modules/WecSubscriptionXml.cs text eol=lf
|
||||
scripts/AppLockerProbe.ps1 text eol=lf
|
||||
tests/AppLockerProbe*.ps1 text eol=lf
|
||||
|
||||
/scripts/ChannelRead.ps1 text eol=lf
|
||||
/scripts/ChannelReadNative.cs text eol=lf
|
||||
/config/native_channel_profile.json text eol=lf
|
||||
/tests/ChannelRead*.ps1 text eol=lf
|
||||
# Pending AD CS restart plans bind exact implementation bytes.
|
||||
/scripts/AdcsRestartResume.ps1 text eol=lf
|
||||
/scripts/AdcsAuditing.ps1 text eol=lf
|
||||
|
||||
Reference in new issue
Block a user